Improper password escapes

Iain McBride imcbride@imajica.org
Mon, 11 Mar 2002 21:35:34 -0500 (EST)


Hey there..

I've been playing with IMP 3.0 for the past few days, and I must say it's
much slicker than previous renditions!

However.. I'm having issues with passwords that contain quotes.  I've
snooped the packets coming in, and see:

POP Request: USER test
POP Response: +OK Password required for test.
POP Request: PASS xx\'xx
POP Response: -ERR [AUTH] PAM authentication failed for user "test":
Authentication failure (7)

Note the PASS that is sent to the server.. the single quote character that
is part of the password is escaped even when passed to the daemon.

I searched the mailing list archives and saw that there was a similar
problem with trailing spaces that has been fixed in the RELENG_3 branch in
CVS, which I checked out with no success.

Perhaps other escapes need to be un-escaped as well?

Cheers,
Iain